$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa File: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (raw, json) Hash identifier: pefL5zpagMnN6F91vtiUchYBoYrPSLuComWqXyqtyhM= Subject key identifier: 7F:B5:39:9E:7A:3B:DE:6F:D5:A0:09:41:8B:1B:32:C3:A2:95:0E:13 Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 288A2A3EC9C3A21D33D41625E4DDAF5FBF47B8EB Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa Signing time: Thu 19 Oct 2023 09:00:33 +0000 ROA not before: Thu 19 Oct 2023 08:55:33 +0000 ROA not after: Thu 17 Oct 2024 09:00:33 +0000 asID: 141592 IP address blocks: 103.160.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8a:2a:3e:c9:c3:a2:1d:33:d4:16:25:e4:dd:af:5f:bf:47:b8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: Oct 19 08:55:33 2023 GMT Not After : Oct 17 09:00:33 2024 GMT Subject: CN=7FB5399E7A3BDE6FD5A009418B1B32C3A2950E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:26:dd:bf:92:6a:79:83:57:dd:6f:a6:85: 29:61:2e:f7:b0:fc:0b:5d:f4:97:c9:64:12:76:35: ee:90:a5:77:15:8e:ca:76:8b:6a:ca:a4:f3:74:06: 03:3c:6a:9f:97:6e:61:63:af:39:6b:e9:48:de:70: 15:c5:a7:6b:3e:de:ae:03:04:4f:96:f5:0a:c2:de: 33:40:51:d5:4b:b3:bb:31:9b:20:a1:02:77:4d:cf: af:01:ab:54:43:93:ef:9f:36:f1:96:1a:a3:91:6c: 2a:50:21:7c:f1:8c:12:1c:48:c3:5a:d8:5f:c3:f7: b4:de:25:57:21:31:98:c7:20:55:88:fb:a6:43:08: 19:00:8c:89:76:ea:a1:6f:c6:12:85:61:0f:fa:e0: ae:a6:12:a5:f2:d4:96:f1:12:ca:0b:84:46:0b:d5: a9:9e:e4:a4:44:76:1c:83:d5:b3:46:71:51:bb:5a: 34:f9:2a:ba:62:99:ac:a1:f2:8b:11:f7:cc:9d:18: 75:07:15:0d:a6:54:b6:49:c2:34:b0:54:9c:18:04: 74:f0:67:cf:46:9c:f3:a6:ee:ef:d6:e1:05:59:53: 00:69:0b:c4:2d:ef:52:ae:f3:4b:2b:d0:db:bf:07: 3d:8d:ff:8d:8a:73:30:32:c9:a5:14:e0:e8:16:26: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B5:39:9E:7A:3B:DE:6F:D5:A0:09:41:8B:1B:32:C3:A2:95:0E:13 X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.178.0/23 Signature Algorithm: sha256WithRSAEncryption c9:81:21:79:f0:a4:43:39:d0:38:52:1e:bc:03:59:df:a8:c4: 43:c4:12:df:c1:58:17:49:5f:f7:13:9a:f4:7b:d7:f4:73:69: 98:3a:e8:22:a4:6c:62:ae:a8:6a:69:98:4b:2b:d1:e3:b1:c9: 2c:25:f6:81:de:1e:c1:7f:f7:d1:a0:28:b9:f3:39:48:e2:e3: ff:75:0d:53:8f:fd:ac:3e:fd:df:da:bf:b1:6f:9a:63:57:27: 70:6f:d9:b8:c8:a5:c3:d8:89:dd:71:32:11:fc:c1:64:bb:a6: 68:a1:34:75:53:71:cc:bd:e3:4f:ec:9d:d4:0d:8a:ae:df:2e: 9b:78:bb:92:98:eb:f2:40:20:49:c5:b2:6a:56:04:91:24:86: b4:f7:51:69:f4:97:2e:b1:74:a9:a2:0c:06:d7:74:be:26:60: 20:13:42:35:4c:7d:33:f2:e7:3c:07:ab:6e:65:5f:23:77:00: 05:51:ea:06:a1:01:82:87:a0:a9:16:89:72:09:cc:93:15:c0: 5b:82:b8:8e:36:f3:96:7a:31:92:f7:62:cb:07:d2:85:22:d9: 52:44:fc:d6:4a:2b:54:ca:de:eb:d0:39:41:17:70:c4:fc:50: e9:33:fc:5e:f1:3e:fa:62:39:e3:4f:f1:33:27:56:9a:37:af: 15:c6:f4:2a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKIoqPsnDoh0z1BYl5N2vX79HuOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yMzEwMTkwODU1MzNaFw0yNDEwMTcwOTAwMzNaMDMxMTAvBgNV BAMTKDdGQjUzOTlFN0EzQkRFNkZENUEwMDk0MThCMUIzMkMzQTI5NTBFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39Cbdv5JqeYNX3W+mhSlhLvew /Atd9JfJZBJ2Ne6QpXcVjsp2i2rKpPN0BgM8ap+XbmFjrzlr6UjecBXFp2s+3q4D BE+W9QrC3jNAUdVLs7sxmyChAndNz68Bq1RDk++fNvGWGqORbCpQIXzxjBIcSMNa 2F/D97TeJVchMZjHIFWI+6ZDCBkAjIl26qFvxhKFYQ/64K6mEqXy1JbxEsoLhEYL 1ame5KREdhyD1bNGcVG7WjT5Krpimayh8osR98ydGHUHFQ2mVLZJwjSwVJwYBHTw Z89GnPOm7u/W4QVZUwBpC8Qt71Ku80sr0Nu/Bz2N/42KczAyyaUU4OgWJk4rAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUf7U5nno73m/VoAlBixsyw6KVDhMwHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwYTgyMGI0LTgyZWYtNDQxMi1i ZTJlLTVkNjkxNGJkNDg0NC8wLzMxMzAzMzJlMzEzNjMwMmUzMTM3MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoLIwDQYJ KoZIhvcNAQELBQADggEBAMmBIXnwpEM50DhSHrwDWd+oxEPEEt/BWBdJX/cTmvR7 1/RzaZg66CKkbGKuqGppmEsr0eOxySwl9oHeHsF/99GgKLnzOUji4/91DVOP/aw+ /d/av7FvmmNXJ3Bv2bjIpcPYid1xMhH8wWS7pmihNHVTccy940/sndQNiq7fLpt4 u5KY6/JAIEnFsmpWBJEkhrT3UWn0ly6xdKmiDAbXdL4mYCATQjVMfTPy5zwHq25l XyN3AAVR6gahAYKHoKkWiXIJzJMVwFuCuI4285Z6MZL3YssH0oUi2VJE/NZKK1TK 3uvQOUEXcMT8UOkz/F7xPvpiOeNP8TMnVpo3rxXG9Co= -----END CERTIFICATE-----Generated at Thu Apr 25 03:19:20 2024 by rpki-client on console-fra.rpki-client.org